Republic of Maldives

Digital Maldives for Adaptation, Decentralization and Diversification (DMADD) Project P177040

Grant No: E047-MV

Assignment Title: Hiring of an Individual consultant for system penetration testing (National)

Reference No.: MV-MoECCT-DMADD-361688-CS-INDV

The Government of Maldives (GoM) has received financing from the World Bank toward the cost of the Digital Maldives for Adaptation, Decentralization and Diversification (DMADD) Project, and intends to apply part of the proceeds of this grant to eligible payments under the contract for the services of an Individual consultant.

The Consultant will work intermittently with the Project Management Unit (PMU) and DNR as Consultant to conduct a comprehensive penetration testing exercise to identify the security posture of DNR’s network infrastructure, systems, and applications. The assessment will involve conducting simulated attacks, identifying vulnerabilities, and providing detailed reports on the findings, including recommendations for remediation. The primary goal is to enhance the overall security posture and resilience of DNR’s digital assets by addressing potential weaknesses and strengthening defensive measures.

The Ministry of Climate Change, Environment and Energy (MoCCEE) now invites eligible individuals to submit their “Expression of Interest” (EOI). Interested individuals should provide a CV including information that demonstrates that they are qualified to perform the services (description of similar assignments, experience in similar conditions, availability of appropriate skills, etc.)

The Candidate should possess the following qualifications and experience:

1. Bachelor’s degree in cyber security/ computer science/ computer security/ network security or in a related field, with a minimum of 5 years of experience in cyber security/ computer science/ computer security/ network security or in a related field.

OR

1. Professional Certification: The consultant conducting the penetration testing and audit should have a valid certification from a trustworthy and industry well-known cyber security assessment certification body. This certification should demonstrate their expertise and knowledge in cybersecurity, including the latest industry standards and best practices, with a minimum of 5 years of work experience in the field of cyber security/ computer science/ computer security/ network security or in a related field in an organization.
2. Prior IT Security Penetration Testing and Audit Experience: The consultant should have prior experience in conducting IT security audits, with continuous work in the field for the past 5 years. This experience should demonstrate their ability to identify and address cybersecurity risks and vulnerabilities in complex and large-scale organizations.

Requirements:

• Letter of Expression of Interest
• Curriculum Vitae (clearly stating the starting and ending month and year for previous experiences)
• Copy of National ID Card
• Copy of Police Clearance Certificate
• Copies of Accredited Academic Certificates
• Employment Verification Letter from previous employer(s), detailing the work and duration of the responsibilities

The consultant will be selected in accordance with the procedures set out in The World Bank Procurement Regulations for IPF Borrowers; Procurement in Investment Project Financing Goods, Works, Non-Consulting and Consulting Services; Fifth Edition dated September 2023.

The detailed Terms of Reference (TOR) for the assignmentare attached to this request for expressions of interestand can be found at the following website:www.environment.gov.mv

Expressions of interest must be delivered in a written form to the address below (in person, or by mail, or by fax, or by e-mail) by April 25^th, 2024 before 1000hrs.

Attn: Project Manager

Digital Maldives for Adaptation, Decentralization and Diversification (DMADD) Project

Ministry of Climate Change, Environment and Energy

National Centre for Information Technology (NCIT),

64, Kalaafaanu Hingun, Male’ 20064, Republic of Maldives

Tel:   +(960)330-2253

Email: [email protected]

   CC: [email protected]